$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145893.roa File: AS145893.roa (raw, json) Hash identifier: fI76uKkhJqEmUOd+aXWhfut9Mu8KnpzACGfZROJ2gLA= Subject key identifier: 1E:93:19:79:11:5F:65:45:95:B3:54:6A:B9:6D:4F:54:1C:63:4C:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 11CFDDEC63651CADC4BB4F5810CB1540DF08DEF8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145893.roa Signing time: Wed 04 Mar 2026 06:30:14 +0000 ROA not before: Wed 04 Mar 2026 06:25:14 +0000 ROA not after: Wed 03 Mar 2027 06:30:14 +0000 asID: 145893 IP address blocks: 240a:acab::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cf:dd:ec:63:65:1c:ad:c4:bb:4f:58:10:cb:15:40:df:08:de:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:14 2026 GMT Not After : Mar 3 06:30:14 2027 GMT Subject: CN=1E931979115F654595B3546AB96D4F541C634C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:bc:95:4b:cf:96:e3:c4:bf:fc:c5:00:1a: 88:81:08:30:15:de:86:b7:19:5e:9c:27:e5:47:c0: 3d:08:dd:51:d4:c5:ad:3f:69:0f:23:de:3b:8a:9c: 7d:35:25:d7:a4:8f:3d:43:1c:37:13:94:a4:16:54: 01:96:f5:77:f8:53:b4:ac:f2:c9:1a:56:7f:48:6a: 30:f8:13:d4:f1:a9:86:e0:46:98:0c:72:bb:ec:f6: e8:e7:55:32:46:c1:e2:e5:99:fb:08:a8:bd:39:0a: f2:ff:e9:f3:85:df:cf:84:c0:fb:f2:90:2b:a3:02: 05:f0:6e:35:1b:43:b3:9b:40:50:87:17:2f:33:83: 54:aa:b6:33:9d:0c:5e:ac:d0:a1:81:a9:43:8b:a8: a0:0b:6a:85:a2:e6:58:8b:91:58:67:1b:42:78:35: 3e:85:e1:bd:02:e0:d0:d8:16:1c:d7:ef:ef:d0:a4: 53:b9:39:27:9e:74:39:14:cb:79:01:e5:64:a2:29: eb:0e:05:95:99:fe:53:0b:fb:20:6a:b8:bd:c7:5e: df:21:76:ab:34:b5:33:02:04:6d:00:f0:1b:40:2b: 93:d2:fa:88:3c:5c:24:4a:4e:75:4d:31:36:d2:aa: 68:e2:90:28:d2:23:c9:0c:0d:cf:69:61:33:52:e5: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:93:19:79:11:5F:65:45:95:B3:54:6A:B9:6D:4F:54:1C:63:4C:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145893.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acab::/32 Signature Algorithm: sha256WithRSAEncryption cd:2b:3b:71:21:09:4b:a4:5e:16:87:4f:10:e9:40:7c:c0:29: 48:6e:f6:0b:c9:93:eb:d9:4a:a9:93:60:42:68:39:0b:3d:90: 1b:ce:9f:81:d9:d0:57:21:9f:0d:85:d1:db:9d:8d:82:eb:67: a6:50:96:c1:97:81:0f:2b:17:36:63:5a:eb:9f:45:63:9e:8e: 8d:f4:f4:3b:e0:4d:21:b8:7e:14:23:03:96:aa:58:3c:70:f0: 21:85:e4:36:2b:1f:53:1e:68:f4:5b:4a:a1:ab:5f:21:9b:c3: 8d:f3:79:f6:ce:0f:08:db:0e:14:0b:1f:b2:89:22:69:be:d9: a8:08:66:54:c4:aa:09:08:21:f5:e1:f6:30:cd:09:5c:dc:46: 5e:09:3d:0f:bf:97:8b:29:d3:a2:c8:a1:ca:8d:12:b1:67:db: 65:c1:c9:70:b1:fc:c4:10:83:5d:78:17:a3:6c:d2:8b:27:5f: 98:2c:64:a4:4c:3c:e0:0d:f7:14:47:e1:cf:35:da:78:83:5f: 64:80:0b:57:af:80:30:1b:4e:a5:ec:ae:94:c9:34:f1:6c:65: ee:fe:7f:fd:8b:e7:0c:2a:6f:a2:7d:16:bd:a5:70:87:c1:30: 4e:22:d7:5e:d9:df:68:98:47:3d:bc:48:8e:5d:23:3b:ab:56: 21:6c:90:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEc/d7GNlHK3Eu09YEMsVQN8I3vgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNFoX DTI3MDMwMzA2MzAxNFowMzExMC8GA1UEAxMoMUU5MzE5NzkxMTVGNjU0NTk1QjM1 NDZBQjk2RDRGNTQxQzYzNEMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA/vJVLz5bjxL/8xQAaiIEIMBXehrcZXpwn5UfAPQjdUdTFrT9pDyPeO4qc fTUl16SPPUMcNxOUpBZUAZb1d/hTtKzyyRpWf0hqMPgT1PGphuBGmAxyu+z26OdV MkbB4uWZ+wiovTkK8v/p84Xfz4TA+/KQK6MCBfBuNRtDs5tAUIcXLzODVKq2M50M XqzQoYGpQ4uooAtqhaLmWIuRWGcbQng1PoXhvQLg0NgWHNfv79CkU7k5J550ORTL eQHlZKIp6w4FlZn+Uwv7IGq4vcde3yF2qzS1MwIEbQDwG0Ark9L6iDxcJEpOdU0x NtKqaOKQKNIjyQwNz2lhM1LlH7MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQekxl5 EV9lRZWzVGq5bU9UHGNMHDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rKswDQYJKoZIhvcNAQELBQADggEBAM0rO3EhCUukXhaHTxDpQHzAKUhu9gvJk+vZ SqmTYEJoOQs9kBvOn4HZ0Fchnw2F0dudjYLrZ6ZQlsGXgQ8rFzZjWuufRWOejo30 9DvgTSG4fhQjA5aqWDxw8CGF5DYrH1MeaPRbSqGrXyGbw43zefbODwjbDhQLH7KJ Imm+2agIZlTEqgkIIfXh9jDNCVzcRl4JPQ+/l4sp06LIocqNErFn22XByXCx/MQQ g114F6Ns0osnX5gsZKRMPOAN9xRH4c812niDX2SAC1evgDAbTqXsrpTJNPFsZe7+ f/2L5wwqb6J9Fr2lcIfBME4i117Z32iYRz28SI5dIzurViFskCE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:15 2026 by rpki-client